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Abstract 

In wireless data networks, communication is particularly susceptible to eavesdropping due to its broadcast 

O ' 

' nature. Security and privacy systems have become critical for wireless providers and enterprise networks. This 

(N ' 

a,. 

' transmitter sends independent confidential messages to two users with information-theoretic secrecy. That is, each 

QQ , user would like to obtain its own confidential message in a reliable and safe manner This communication model 



paper considers the problem of secret communication over the Gaussian broadcast channel, where a multi-antenna 



is referred to as the multi-antenna Gaussian broadcast channel with confidential messages (MGBC-CM). Under 
this communication scenario, a secret dirty-paper coding scheme and the corresponding achievable secrecy rate 



secret communication, broadcast channels, multiple antennas, information-theoretic secrecy 



' region are first developed based on Gaussian codebooks. Next, a computable Sato-type outer bound on the secrecy 

capacity region is provided for the MGBC-CM. Furthermore, the Sato-type outer bound prove to be consistent with 
the boundary of the secret dirty-paper coding achievable rate region, and hence, the secrecy capacity region of the 
MGBC-CM is established. Finally, two numerical examples demonstrate that both users can achieve positive rates 

!>■ 

' simultaneously under the information-theoretic secrecy requirement. 
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^ , I. Introduction 

The need for efficient, reliable, and secret data communication over wireless networks has been rising 
rapidly for decades. Due to its broadcast nature, wireless communication is particularly susceptible to 
eavesdropping. The inherent problematic nature of wireless networks exposes not only the risks and 
vulnerabilities that a malicious user can exploit and severely compromise the network, but also multiplies 
information confidentiality concerns with respect to in-network terminals. Hence, security and privacy 
systems have become critical for wireless providers and enterprise networks. 
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Fig. 1. Multiple-antenna Gaussian broadcast channel with confidential message 



In this work, we consider multiple antenna secret broadcast in wireless networks. This research is 
inspired by the seminal paper [1], in which Wyner introduced the so-called wiretap channel and proposed 
an information theoretic approach to secret communication schemes. Under the assumption that the channel 
to the eavesdropper is a degraded version of that to the desired receiver, Wyner characterized the capacity- 
secrecy tradeoff for the discrete memoryless wiretap channel and showed that secret communication is 
possible without sharing a secret key. Later, the result was extended by Csiszar and Komer who determined 
the secrecy capacity for the non-degraded broadcast channel (BC) with a single confidential message 
intended for one of the users [2]. 

In more general wireless network scenarios, secret communication may involve multiple users and 
multiple antennas. Motivated by wireless communication, where transmitted signals are broadcast and can 
be received by all users within the communication range, a significant research effort has been invested 
in the study of the information-theoretic limits of secret communication in different wireless network 
environments including multi-user communication with confidential messages [3]-[ll], secret wireless 
communication on fading channels [12]-[15], and the Gaussian multiple-input single-output (MISO) and 
multiple-input multiple-output (MIMO) wiretap channels [16]-[21]. 

These issues motivate us to study the multi-antenna Gaussian BC with confidential messages (MGBC- 
CM), in which independent confidential messages from a multi-antenna transmitter are to be communicated 
to two users. The corresponding broadcast communication model is shown in Fig. [B Each user would 
like to obtain its own message reliably and confidentially. 

To give insight into this problem, we first consider a single-antenna Gaussian BC. Note that this channel 
is degraded [22], which means that if a message can be successfully decoded by the inferior user, then the 
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superior user is also ensured of decoding it. Hence, the secrecy rate of the inferior user is zero and this 
problem is reduced to the scalar Gaussian wiretap channel problem [23] whose secrecy capacity is now the 
maximum rate achievable by the superior user. This analysis gives rise to the question: can the transmitter, 
in fact, communicate with both users confidentially at nonzero rate under some other conditions? Roughly 
speaking, the answer is in the affirmative. In particular, the transmitter can communicate when equipped 
with sufficiently separated multiple antennas. 

We here have two goals motivated directly by questions arising in practice. The first is to determine the 
condition under which both users can obtain their own confidential messages in a reliable and safe manner. 
This is equivalent to evaluating the secrecy capacity region for the MGBC-CM. The second is to show 
how the transmitter should broadcast confidentially, which is equivalent to designing an achievable secret 
coding scheme. To this end, we first describe a secret dirty-paper coding (DPC) scheme and derive the 
corresponding achievable secrecy rate region based on Gaussian codebooks. The secret DPC is based on 
double-binning [24] which enables both joint encoding and preserving confidentiality. Next, a computable 
Sato-type outer bound on the secrecy capacity region is developed for the MGBC-CM. Furthermore, 
the Sato-type outer bound prove to be consistent with the boundary of the secret dirty-paper coding 
achievable rate region, and hence, the secrecy capacity region of the MGBC-CM is established. Finally, 
two numerical examples demonstrate that both users can achieve positive rates simultaneously under the 
information-theoretic secrecy requirement. 

The remainder of this paper is organized as follows. The system model and definitions are introduced 
in Section [III The main results on the secrecy capacity region of the MGBC-CM is state in Section Hill 
The achievability proof associated with the secret DPC scheme is established in Section |IVl The converse 
proof is derived in Section |V] based on the Sato-type outer bound. Finally, Section |VI] shows numerical 
examples and Section rVIIl points our our conclusions. 

II. System Model and Definitions 

A. Channel Model 

We consider the communication of confidential messages to two users over a Gaussian BC via t > 2 
transmit-antennas. Each user is equipped with a single receive-antenna. As shown in Fig.iU the transmitter 
sends independent confidential messages Wi and W2 in n channel uses with nRi and ni?2 bits, respectively. 
The message Wi is destined for user 1 and eavesdropped by user 2, whereas the message W2 is destined 
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for user 2 and eavesdropped by user 1 . This communication scenario is referred to as the multi-antenna 
Gaussian BC with confidential messages. The Gaussian BC is an additive noise channel and the received 
symbols at user 1 and user 2 are represented using the following expression: 

y2,i = g^Xi + Z2,i, i = l,...,n (1) 

where Xj G C* is a complex input vector at time i, {zi i} and {z2,i} correspond to two independent, 
zero-mean, unit-variance, complex Gaussian noise sequences, and h, g G C* are fixed, complex channel 
attenuation vectors imposed on user 1 and user 2, respectively. The channel input is constrained by 
tr(ii'x) < where P is the average total power limitation at the transmitter. We also assume that both 
the transmitter and users are aware of the attenuation vectors. 

B. Important Channel Parameters for the MGBC-CM 

For the MGBC-CM, we are interested in the following important parameters, which are related to the 
generalized eigenvalue problem (see Appendix H] for the details). 

Let Ai and ei denote the largest generalized eigenvalue and the corresponding normalized eigenvector 
of the pencil (/ + Phh^, / + Pgg^) so that ef ei = 1 and 

(/ + Phh^)ei = Ai(/ + Pgg^)ei. (2) 

Similarly, we define A2 and e2 as the largest generalized eigenvalue and the corresponding normalized 
eigenvector of the pencil (/ + Pgg^, / + Phh^) so that = 1 and 

(J + Pgg^)e2 = A2(/ + Phh^)e2. (3) 

An useful property of Ai and A2 is described in the following lemma. 

Lemma 1: For any channel attenuation vector pair h and g, the largest generalized eigenvalues of the 
pencil (/ + Phh^, I + Pgg") and the pencil (/ + Pgg^, / + Phh^) satisfy 

Ai > 1 and A2 > 1. (4) 



Moreover, if h and g are linearly independent, then both Ai and A2 are strictly greater than 1. 

Proof: We provide the proof in Appendix HI ■ 
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C. Definitions 

We now define the secret codebook, the probability of error, the secrecy level, and the secrecy capacity 
region for the MGBC-CM as follows. 

An (2"^i,2"^2 n) secret codebook for the MGBC-CM consists of the following: 

1) Two message sets Wi = {1, . . . , 2"^i} and W2 = {1, . . . , 2"^^^}. 

2) An stochastic encoding function is specified by a matrix of conditional probability density p(x" W2), 
where x" = [xi, . . . , x„] G C*""", Wk G Wk, and 




p{yi^\wi,W2) = 1. 



3) Decoding functions 0i and 02- The decoding function at user A; is a deterministic mapping 

Remark 1: To increase the randomness of transmitted messages, we consider a stochastic encoder at the 
transmitter. In other words, p(x"|wi, W2) is the conditional probability density that the messages (^1,^2) 
are jointly encoded as the channel input sequence x". 

At the receiver ends, the error performance and the secrecy level are evaluated by the following 
performance measures. 

1) The reliability is measured by the maximum error probability 

Pi")4max{P5\p(^} 
where Pg*^-* is the error probability for user k given by 

p(n) ^ ^-niRM) ^ ^ PliMyn ^ Wk\{wuW2) SCnt] . (5) 

2) The secrecy levels with respect to confidential messages Wi and W2 are measured, respectively, at 
user 2 and user 1 with respect to the equivocation rates 

-H(W2\Y;') and -H(Wi\Y^). (6) 
n n 

A rate pair (^1,^2) is said to be achievable for the MGBC-CM if, for any e > 0, there exists an 
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(2"^i , 2"^2 ^ fi'^ code that satisfies Pe < e, and the information-theoretic secrecy requiremen 

nRi- H{Wi\Y^) < ne 
and nR2 - H{W2\Y-l') < ne. (7) 

The secrecy capacity region C^*^ of the MGBC-CM is the closure of the set of all achievable rate pairs 

III. Main Result: Secrecy Capacity Region for the MGBC-CM 

The two-user Gaussian EC with multiple transmit-antennas is non-degraded. For this channel, we have 
the following closed-from result on the secrecy capacity region under the information-theoretic secrecy 
requirement. 

Theorem 1: We consider an MGBC-CM modeled in Q). Let 

l + aP|h^eip 

7l(") = ^ PI H 12 ' 

72(a) be the largest generalized eigenvalue of the pencil 

1 - a)P „„„ , , (1 - a)P ^^„\ ^ 



1 + aP|g^ei|2'"' ' l + aP|h^ei|2 
and TZ^'^{a) denote the union of all (^1,^2) satisfying 

0<Pi <log2 7i(«) 

and < P2 < log2 72(a)- (10) 

The secrecy capacity region of the MGBC-CM is 

^^""=^4 u ^''''(«)|' (11) 

L0<Q<1 J 

where co{5} denotes the convex hull of the set S. 

Proof: We provide the achievability proof in Section |IV] based on a secret dirty paper coding scheme, 
and show the converse proof in Section |V] based on a Sato-type outer bound. ■ 

'This definition corresponds to the so-called weak secrecy-key rate [25]. A stronger measurement of the secrecy level has been defined 
by Maurer and Wolf in terms of absolute equivocation [25], where the authors have shown that the former definition could replaced by the 
latter without any rate penalty in a wiretap channel. 



Based on Theorem [H we can calculate the boundary of the secrecy capacity region C^^*^ by choosing 
a to trade off the rate Ri for the rate i?2- In particular, when a = 1, we obtain 

ef(/ + Phh^)ei 

and 72(1) = 1 (13) 

where (fT2l) follows from the definitions of Ai and ei in Theorem [T] implies that the rate pair (log2 Ai, 0) 
is achievable. In fact, this rate pair is the corner point corresponding to the maximum achievable rate of 
user 1 in the capacity region C^'^. 

Corollary 1: For the MGBC-CM, the maximum secrecy rate of user 1 is given by 

^i,max = max log2 7i(a) = log2 Ai (14) 

0<a<l 

where Ai is the largest generalized eigenvalue of the pencil (/ + Phh^, I + Pgg^). 

Proof: See Appendix UIl ■ 
Example 1: (MISO Wiretap Channels) A special case of the MGBC-CM model is the Gaussian MISO 
wiretap channel studied in [16], [18], [20], where the transmitter sends confidential information to only 
one user and treats another user as an eavesdropper. Let us consider a Gaussian MISO wiretap channel 
modeled in ©, where user 1 is the legitimate receiver and user 2 is the eavesdropper. Corollary [T] implies 
that the secrecy capacity of the Gaussian MISO wiretap channel corresponds to the comer point of C^^. 
Hence, the secrecy capacity of the Gaussian MISO wiretap channel is given by 

Cr'°=log2Ai, (15) 

which coincides with the result of [18]. 

For the MGBC-CM, the actions of user 1 and user 2 are symmetric to each other, i.e., each user 
decodes its own message and eavesdrops the confidential information belonging to another user. Based on 
symmetry of this two-user BC model, we can express the secrecy capacity region Cf^*^ in an alternative 
way. 

Corollary 2: For an MGBC-CM modeled in ©, the secrecy capacity region can be written as 



= CO 



U \ (16) 

.0</3<l 
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where 7^^*^ denotes the union of all {Ri,R2) satisfying 

0<i?i<iog2 6(/3) 

and 0<i?2<log2 6(/^), (IV) 

is the largest generalized eigenvalue of the pencil 

; + ^l^«L^hh« /.-Ji^gg") (18, 

1 + /3P\h"e2\^ l + /5P|g^e2|^ / 

and 

_ l+/3P|g^e2p 
^^^'^^ - l+/3P|h^e2r ^^^^ 
Proof: The derivation follows from the same approach of the proof for Theorem \T\ by reversing the 

roles of user 1 and user 2. ■ 

Remark 2: Theorem [U and Corollary [2] imply that if a and /3 satisfy the implicit function 71(a) = 

then 

For example, it is easy to check n^^{l) = 7^'^^-^(0). 

Now, by applying Corollary [2] and setting /5 = 1, we can show that the rate pair (0, log2 A2) is the 
comer point corresponding to the maximum achievable rate of user 2 in the capacity region C^*^. 

Corollary 3: For the MGBC-CM, the maximum secrecy rate of user 2 is given by 

^2,max = loga A2 (20) 

where A2 is the largest generalized eigenvalue of the pencil (/ + Pgg^, / + Phh^). 

Proof: The derivation follows from the same approach of the proof for Corollary \T\ ■ 
Corollaries [U and [3] imply that for the MGBC-CM, both users can achieve positive rates with information- 
theoretic secrecy if and only if Ai > 1 and A2 > 1. Lemma [Uillusrtates that this condition can be ensured 
when the attenuation vectors h and g are linear independent. 



IV. Secret DPC Coding Scheme and Achievability Proof 

We first briefly review the prior information-theoretic result on the achievable rate region for the BC 
with confidential messages (BC-CM) of [24]. Based on this result, we develop the achievable secret coding 
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scheme for the MGBC-CM and find the capacity achieving input covariance matrix. 

A. Double-Binning Inner bound for the BC-CM 

An achievable rate region for the BC-CM has been established in [24] based on a double-binning 
scheme that enables both joint encoding at the transmitter by using Slepian-Wolf binning [26] and 
preserving confidentiality by using random binning. We summarize the double-binning codebook and 
encoding strategy in Appendix Hill for completeness. 

Lemma 2: ( [24, Theorem 3]) Let Vi and V2 be auxiliary random variables, f2 denote the class of 
joint probability densities p(vi, V2, x, yi, 1/2) that factor as 

P(Vl, V2)p(x|Vi, V2)p(l/i, ?/2|x), (21) 

and TZiin) denote the union of all {Ri, R2) satisfying 

< i?i < /(Vi; Fi) - /(Vi; y2|V2) - /(Vi; V2) (22) 
and 0<i?2</(V2;F2)-/(V2;Fi|Vi)-/(Vi;V2) (23) 

for a given joint probability density tt G fi. For the BC-CM, any rate pair 

(i?i,i?2)ecoi U^iWf (24) 

is achievable. 

The proof of Lemma |2] can be found in [24]. Here, we provide an alternative view on this result. Since 
randomization can increase secrecy, we employ stochastic encoding at the transmitter so that the size of 
the secret codebook is larger than the size of message set. Let R' denote the redundant rate used to prevent 
the confidentiality. The best known achievable region for a general BC was found by Marton of [27]. 
Now, for a given joint density p(vi, V2,x), a special case of the Marton sum rate (without a common 
rate) is given by 

Ri + R2 + R'< /(Vi; Fi) + /(V2; Y2) - /(Vi; V2). (25) 

On the other hand, the total (both the intended and the eavesdropped) information rate obtained by user 2 
is limited by /(Vi, V2; Y2). Intuitively, to keep the message Wi secret from user 2, the redundant rate R' 
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should satisfy that 

i?2 + i?'>/(Vi,V2;F2). (26) 

This implies that to satisfy the information-theoretic secrecy requirement, the achievable secrecy rate of 
user 1 can be written as 

Ri < [/(Vi; Fi) + /(V2; Y2) - /(Vi; V2)] - /(Vi, V2; Y^). (27) 

Similarly, the achievable secrecy rate of user 2 can be written as 

R2 < [/(Vi; Fi) + /(V2; ¥2) - /(Vi; V2)] - /(Vi, V2; Fi). (28) 

Bounds (l27l) and (l28l) lead to the achievable secrecy rate region in Lemma [21 

Remark 3: For the BC with confidential messages, one can employ joint encoding at the transmitter. 
However, to preserve confidentiality, both achievable rate expressions in (l22l) and ( |23l) include a penalty 
term /(Vi; V2). Hence, compared with Marton's achievable region [27] for a general BC, here, one need 
to pay "double" for jointly encoding at the transmitter. 

B. Secret DPC Scheme for the MGBC-CM 

The achievable strategy in Lemma [2] introduces a double-binning coding scheme. However, when the 
rate region (l24l) is used as a constructive technique, it not clear how to choose the auxiliary random 
variables Vi and V2 to implement the double-binning codebook, and hence, one has to "guess" the 
density of j9(vi,V2,x). Here, we employ the DPC technique with the double-binning code structure to 
develop the secret DPC (S-DPC) achievable rate region for the MGBC-CM. 

For the MGBC-CM, we consider a secret dirty-paper encoder with Gaussian codebooks as follows. 
First, we sperate the channel input X into two random vectors Ui and U2 so that 



Ui + U2 = X. 



(29) 
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We choose Ui and U2 as well as auxiliary random variables Vi and V2 as follows: 

U2 ~ CJ\f{0, A'ua), independent of Ui 

Vi = Ui + bh^U2 and V2 = U2 (30) 

where Jiui and Ku^ are covariance matrices of Ui and U2, respectively, and 

b = ^^^-^ (31) 

Based on the conditions (l30l) and Lemma[2l we obtain a S-DPC rate region for the MGBC-CM as follows. 
Lemma 3: [S-DPC region] Let Tli~^^'^{Kjj-^, Kjj^) denote the union of all (i?i,i?2) satisfying 

0<i?i<log, (32) 
1 + g^ATuig 

and < i?2 < log2 — -r-^-r-^ , 1^ \u + ^082 — irp ■ ^^^^ 

Then, any rate pair 

{R,,R2)eco\ \J 7^^°PC(i^'u,,i^uJ > (34) 

is achievable for the MGBC-CM. 

Proof: See the Appendix Hill ■ 
Remark 4: We choose the random variables Ui, U2, Vi, V2 and X as the same as the classical DPC 
strategy (e.g., see [28], [29]). However, the S-DPC scheme is different from the classical one. The codebook 
and the coding structure of the S-DPC scheme is based on the double-binning (see Appendix UlI)) . 

C. Achievability Proof of Theorem [7] 

The S-DPC achievable rate region (|34|) requires optimization of the covariance matrices Kjj^ and Ku^. 
In order to achievable the boundary of C^^, we choose A'ui and K\j^ as follows: 

ATui = «Peief 

and ATua = (1 - a)Pc2(a)cf (a), for < a < 1 (35) 
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where ei is defined in Q and 02(0) is a normalized eigenvector of the pencil ^ corresponding to 72(a) 
so that c^(a)c2(a) = 1 and 

, il-a)P __h\.s_.,s{,. {l-a)P 



Since Ui and U2 are independent, (|29l ) implies that the input covariance matrix can be written as follows: 



= aPeief + (1 - a)Pc2(a)cf (a), for < a < 1. (37) 

Hence, we have 

tr(Xx) = tr(i^u, + /^uj = (38) 

i.e., the channel input power constraint is satisfied. 
Next, inserting (|35l) into (|321 ) and (|331) . we obtain 

1 + g^iCuig 

and 

[1 + g^(/rui + i^ujg][i + h^i^u.h; 



72(a). (40) 



[1 + h^(/lu, + Aujh][l + g^Kuj 

where the intermediate steps for deriving (|40|) are given in Appendix Unl Now, by substituting (l39l) and 
(|40l ) into Lemma [3l we obtain the desired achievable result. 

Remark 5: The secrecy capacity region Cf^^ can be achieved by using the S-DPC scheme, in which 
the capacity achieving input covariance matrix is with rank 2. Furthermore, by reversing the roles of user 
1 and user 2, we have the achievability proof for Corollary |2l 

V. Sato-Type Outer Bound and Converse Proof 

In this section, we first describe a new Sato-type outer bound that can be applied to both discrete 
memoryless and Gaussian broadcast channels with confidential messages. Next, a computable Gaussian 
version of this bound is derived for the MGBC-CM. Finally, we prove that the Sato-type outer bound 
coincides with the secrecy capacity region Cl 



■>MG 
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A. Sato-Type Outer Bound 

We consider an important property for the BC-CM in the following lemma. 

Lemma 4: Let V denote the set of channels y^i^ whose marginal distributions satisfy 

Pyi|x(?/i|x) =pyi|x(z/i|x) 
and Py^ix(y2|x) = py,|x(?/2|x) (41) 

for all yi, y2 and x. The secrecy capacity region C^*^ is the same for the channels Py^ -pjix ^ ^• 

Proof: We provide the proof in Appendix |llll ■ 

We note that V is the set of channels pf^ y^jx that have the same marginal distributions as the original 
channel transition density py^^yjix- Lemma |4] implies that the secrecy capacity region depends only 
on marginal distributions. 

Theorem 2: Let T^o (-Pyi^y^lX' -^x) denote the union of all rate pairs {Ri, R2) satisfying 

</(X;Fi,F2)-/(X;F2) (42) 
and R2 < /(X; Y,, Y2) - /(X; Yl) (43) 

for given distributions Px and -Py^ y2|x- The secrecy capacity region of the BC-CM satisfies 

Cr^^ n |U^o(i^,y,x,^x)|. (44) 

Proof: See the Appendix Unl ■ 
Remark 6: The outer bound (l44l) follows by evaluating the secrecy level at each user end in an individual 
manner, while by letting the users decode their messages in a cooperative manner. In this sense, we refer 
to this bound as "Sato-type" outer bound. 

For example, we consider the confidential message Wi that is destined for user 1 (corresponding to 
Yi) and eavesdropped by user 2 (corresponding to Y2). We assume that a genie gives user 1 the signal 
Y2 as the side information for decoding Wi. Note that the eavesdropped signal Y2 at user 2 is always a 
degraded version of the entire received signal (Yi, Y2). This permits the use of the wiretap channel result 
of [1]. 

Remark 7: Although Theorem [2] is based on a degraded argument, the outer bound (l44l) can be applied 
to general broadcast channels with confidential messages. 
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B. Sato-Type Outer Bound for the MGBC-CM 

For the Gaussian BC, the family V is the set of channels 

yi = h^x + zi 

y2 = g^x + ^2 (45) 

where zi and Z2 correspond to arbitrarily correlated, zero-mean, unit-variance, complex Gaussian random 
variables. Let p denote the covariance between Zi and Z2, i.e, 

Cov{Zi,Z2)=p and |p|^ < 1. 

Now, the rate region 1Zo{Py^ yjIX'-^x) is a function of the noise covariance p and the input covariance 
matrix J^x- We consider a computable Sato-type outer bound for the MGBC-CM in the following lemma. 

Lemma 5: Let TZq'^{p, Kx) denote the union of all rate pairs {Ri, R2) satisfying 

0<Ri<fi{p,Kx) (46) 
and 0<i?2</2(p,/^x) (47) 



where 



fi (P, ^-^x) = mm log2 —rj- (48) 



i/GC 



(h - ug)"Kx{h - z/g) + 1 + 1 




^ - u*p - p*v 


(g - ph)^J^x(g - ph) + 1 + 


|p 


? - p*p - p*p 


(1- 


\p 





and /2(p, i^x) = minlog^ " " " " (49) 



For the MGBC-CM, the secrecy capacity region satisfies 

Cf^C U 7^o(p,Ax) (50) 

tr{A'x)<P 

for any < |p| < 1. 

Proof: We provide the proof in Appendix [nil ■ 

C. Converse Proof of Theorem [7] 

In this subsection, we prove that the Sato-type outer bound of Lemma |5] coincides with the secrecy 
capacity region by properly choosing the parameter p. 
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1) Choosing the parameter p: Note that Lemma [5] is true for any p such that < |p| < 1. In particular, 
we consider 

Po = Tj^- (51) 
h^ei 

The definitions of Ai and ei in (|2l) imply that 

|hVr-Ai|gVr = ^. (52) 
Since Ai > 1 (see Lemma [U), we obtain 

^ ^ < 1. (53) 



h^ei 

Hence, we can choose p = po in Lemma [5l 

2) Determining the relationship between and a: We observe that the rate region TZq'^{po, Kx.) 
defined in Lemma [5] is a function of the input covariance matrix A'x, while the rate region Tl^'^{a) 
defined in Theorem [T] is a function of a. In order to prove the main result, we build the relationship 
between Kx and a in the following lemma. 

Lemma 6: For any input covariance matrix Kx with ii{Kx) < -P, there exists a « G [0, 1] such that 
L{Kx, a) = 0, where 

L{Kx,a) = [h- po7i(«)g]^(^x - aPeief )[h - Po7i(a)g]- (54) 
Proof: We provide the proof in Appendix |IVl ■ 
Based on the function L{-), we define the subset of input covariance matrices in terms of a as follows: 

C{a) = {Kx: L{Kx,a) = 0}. (55) 

Moreover, Lemma [6] implies that 

U C{a) = {Kx : tr(Kx) < P}- (56) 

0<o<l 

3) Bound on fi{po,Kx)-' Now, we prove that if Kx G C{a), then 



fi{Po,Kx) < log2 7i(«)- 



(57) 
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Let u{a) = Po7i(q;)- For a given Kx G ^{ct), the definition (|48l) implies that 

fl{po,Kx) < log2 



[h- 


z/(a)g]^Ax[h- z/(a) 


g] + 


l + |z/(a)|2 


-i^*(a)po-p:'^(«) 






1 - 








[h - po7i(")g]^ei^ + 


1 + 


|Pop7?(a) - 


-2|pop7i(«) 




1 - 


Ipo 


2 





(58) 



Based on the definition of po in (|5T|) . we have 



h-po7i(a)g = h-7i(" 



gg^ei 



h^ei 
hh^ -7i(a)gg^ 



ei- 



(59) 



Hence, 



|[h - po7i(a)g]^ei| 



h^ei|^-7i(c.)|g^eip]^ 
|h^ei|2 

hVl' - 7i(a)|gVr] [1 - 7i(a)|Po| 
7i(") - 1 



aP 



[1 -7i(a)|po| 



(60) 



where the last step of (l60l) follows from the definition of 71(0;) in ([8]). Substituting (|60l) into (l58l) . we 
obtain 



fiipo,Kx.) < logs 



[71(a) - 1][1 - 7i(«)|PoP] + 1 + |Pop7?(a) - 2|pop7i(a) 



1 - IPoI 



. 7i(«) - |Pop7i(«) 



= logs 7i(tt)- 

4) Bound on f2{Po,Kx): Here, we prove that if Kx G C{a), then 

fi{po,Kx) < logs 72(a) 



(61) 



(62) 



where 72(a) is the largest generalized eigenvalue of the pencil Q. In fact, the smallest generalized 
eigenvalue of the pencil ^ is 7i(a)/Ai. This result is described in the following lemma. 

Lemma 7: 7i(a;)/Ai and ei(a) are the smallest generalized eigenvalue and the corresponding normal- 
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ized eigenvector of the pencil 



(l-a)P rr , 



1 + aP|g^ei|2"° ' l + aP|h^ei|2 

where Ai and ei(a) are defined in Q, and 71(a) is defined in ([8]). 

Proof: We provide the proof in Appendix |IVl 
Based on the property of generalized eigenvalues (see Appendix U), Lemma |7] implies that 

'l-a)P 



(63) 



and 



1 + 
I 



1 + aP|g^ei|2 
{l-a)P 



:hh 



H 



C2[a) = 
C2(a) = 



1 + aP|h^ei|2 

where C2(a) is the normalized eigenvector of the pencil ^ corresponding to 72(a)- Hence, 

(1 -a)P 



(64) 
(65) 



H. 



and 



— I ^ i^ ei gg C2 a = -ei C2 a 

1 + aP|g^eip 

(1 -a)P 



l + aP|h^ei| 



-ef hh^C2(a) = -ef C2(a). 



(66) 
(67) 



By combining the definitions of po in (|5TI) and 71(a) in ([8]), we obtain 



Po 



g^ei 



h^ei 7i(a) 



h^C2( 



a 



rH 



(68) 



We now establish the relationship between 71(a) and 72(a) based on (|68l) in the following lemma. 
Lemma 8: For any a G [0, 1], 

g-Po72(a)h 



and 



|g-Po72(a)h|2 
[h-po7i(«)g]''[g-p:72(«)h] =0 



C2 a 



(69) 
(70) 



where 71(a) is defined in ([8]), and 72(a) and C2(a) are the largest generalized eigenvalue and the 
corresponding normalized eigenvector of the pencil 

Proof: We provide the proof in Appendix |IVl ■ 
Let Ci(a) denote the normalized vector of h — po7i(a)g, i-C-, 

h - po7i(a)g 



Glial 



|h - Po7i(") 



(71) 
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Note that Lemma [8] implies that Ci{a) and 02(0) are orthogonal. Moreover, since the input covariance 
matrix Kx is Hermitian and positive semidefinite, we obtain 

cf («)i^xci(«) + («)i^xC2(a) < tr(J^x) = P- (72) 

Hence, for a given Kx £ jC{a), we have 

(a)AxC2(a) <P- aP|cf (a)ei|2 

= (1 -a)P + aP|cf(a)ei|2. (73) 

Inserting (|69l) into ( 1731 ). we obtain 

[g - p:72(«)h]^i^x[g - p:72(«)h] < (1 - a)PC{a) + aPr]{a) (74) 

where 

C(«) = |g-p:72(«)h)P (75) 
and r/(«) ^ |g - p:72(a)hnef C2(a)p. (76) 

In Appendix |IVl we prove the following equality 

(1 - a)PC(a) + aPvic^) = [72(a) - 1][1 - 72(a) |Po|']. (77) 
Next, we consider the bound on /2(po7 -^"^x)- Let 

P(a) = Po72(a)- 

For a given Kx G C{a), the definition (|49l ) implies that 

[g - /i(a)h]^Kx[g - p(a)h] + 1 + |/i(a)P - /x*(a)po - pX") 



f2{po,Kx) < log. 



1-IPoP 

1 + 
1-IpoI 



< j^g^ (1 - a)PC(a) + aPyja) + 1 + \Po\^ll{a) - 2|pop72(«) ^^g^ 
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Fig. 2. Comparison of the Sato-type outer bound and secrecy rate regions achieved by time-sharing and simplified DPC schemes for the 
example MGBC-CM in {MJ 



Now, substituting (T/Tl) into (fTSl) . we obtain 

[72(«) - 1][1 - 72(«)|Po|'] + 1 + |Po|'7|(«) - 2|Po|'72(«) 



f2{po:K^) < log2 



IPol 



= log2 72(a)- 

Finally, Combining (l56l) . (|6TI) and (1791 ). we have the desired result: 



(79) 



tr{/<x)<P 



(80) 



0<Q<1 



VI. Numerical Examples 



In this section, we study two numerical examples to illustrate the secrecy capacity region of the MGBC- 
CM. For simplicity, we assume that the Gaussian BC has real input and output alphabets and the channel 
attenuation vectors h and g are real too. Under this condition, all calculated rate values are divided by 2. 

Example 2: In the first example, we consider the following MGBC-CM 



(81) 



where h = [1.5, 0]"^, g = [1.801, 0.872]^, and the total power constraint is set to P = 10. Fig. [21 illustrates 
the secrecy capacity region for the channel (|8T1) . We observe that even though each component of the 



yi 




1.5 






+ 




y2 




1.801 0.871 




X2 




Z2 
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Fig. 3. Comparison of the Sato-type outer bound and secrecy rate regions achieved by time-sharing and simplified DPC schemes for the 
example MGBC-CM in ^ 



attenuation vector h (imposed on user 1) is strictly less than the corresponding component of g (imposed 
on user 2), both users can achieve positive rates simultaneously under the information-theoretic secrecy 
requirement. 

Example 3: In the second example, we consider the MGBC-CM as follows 



yi 




1.414 1.414 




Xi 


+ 


Zl 


1/2 




0.4 1.959 




X2 




Z2 



(82) 



where h = [1.414, 1.414]-^, g = [0.4, 1.959]^, and the total power P = 10. The secrecy capacity region 
of the channel (l82l) is calculated and depicted in Fig. [3l 

Moreover, we compare the secrecy capacity region with the secrecy rate region achieved by the time- 
sharing scheme (indicated by the dash-dot line). The time-sharing refers to the scheme in which the 
transmitter sends the confidential message Wi with total power Pi during a fraction ti of time, and sends 
the confidential message W2 with total power P2 during a fraction T2 of time, where 

T1 + T2 = 1 and TiPi + T2P2 = P. 



Note that in each time fraction, the MGBC-CM reduces to a Gaussian MISO wiretap channel. Using 
such time-sharing, the rate pair logg Ai(Pi), y log2 A2(-P2)) is achievable, where Ai(Pi) and \2{P2) 
are the largest generalized eigenvalues of the pencil (/ + Pihh^ , I + Pigg^) and the pencil (/ + 



21 



P2gg^ , I + P2gg^), respectively. Both Fig. [2] and Fig. [3] demonstrate that the time-sharing scheme is 
strictly suboptimal for providing the secrecy capacity region. 

VII. Conclusion 

In this paper, we have investigated the secrecy capacity region of a generally non-degraded Gaussian 
BC with confidential messages for two users, where the transmitter has t antennas and each user has a 
single antenna. For this model, we have proposed a secret dirty-paper coding scheme and introduced a 
computable Sato-type outer bound. Furthermore, we have proved that the boundary of the secret dirty- 
paper coding rate region is consistent with the Sato-type outer bound for the multiple- antenna Gaussian 
BC, and hence, we have obtained the secrecy capacity region for the MGBC-CM. 

Unlike the single-antenna Gaussian BC-CM case, in which only the superior user can obtain confidential 
information at a positive secrecy rate, our result has illustrated that both users can achieve strictly positive 
rates with information-theoretic secrecy through a multiple- antenna Gaussian BC if attenuation vectors 
imposed on user 1 and user 2 are linear independent. Therefore, it becomes more practical and more 
attractive to achieve information-theoretic secrecy in wireless networks by employing multiple transmit- 
antennas at the physical layer. 

Appendix I 

The Generalized Eigenvalue and Rayleigh Quotient Problem 
A generalized eigenvalue problem is to determine the nontrivial solutions of the equation 

Ae = \Be (83) 

where A and B are matrices and A is a scalar. The values of A that satisfy (l83l) are the generalized 
eigenvalues and the corresponding vectors of e are the generalized eigenvectors. 

In particular, if A is Hermitian and B is Hermitian and positive definite, then we have the following 
properties of Ae = \Be: 

1) The generalized eigenvalues Aj are real. 

2) The eigenvectors are "5 -orthogonal", i.e., 

e^Bej = for i ^ j. (84) 
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3) Similarly, 

efAej = XjefAe^ =0 for i j. (85) 

Next, we describe the well-known Rayleigh's quotient [30] as follows. 
Theorem 3: (see [30]) Let r(c) be the Rayleigh's quotient defined as 

Kc) ^ (86, 

where A is Hermitian and B is Hermitian and positive definite. The quotient R{c) is maximized by the 
eigenvector emax corresponding to the largest generalized eigenvalue A^ax of the pencil {A, B): 

™ TDf„\ '^max^^^max , /otn 

maxi?(c) = ^ = Amax (87) 

^max-^^max 

and -R(c) is minimized by the eigenvector emin corresponding to the smallest generalized eigenvalue Amin 
of the pencil {A, B): 

p^- /4p ■ 

mm R{c) = = Aniin. (88) 

The proof of Theorem [3] can be found in [30, Chapter 6]. Now we prove Lemma H] based on the Rayleigh's 
quotient principle. 

Proof: (Lemma [H) Since both (/ + Phh^) and (/ + Pgg^) are Hermitian and positive definite 
matrices, the definition of Ai and Theorem [3] imply that 

c"(I + Phh^)c 

Ai = max — (89) 

c c^(/ + Pgg^)c ^ ^ 

We consider a unit vector Cq that is orthogonal with the vector g, i.e., 

c^co = 1 and c^g = 0. 

Now, we have 



Ai> 



c^(/ + Phh^)co 

C^(/ + Pgg^)Co 

1 + P|c^h|l (90) 



This implies that Ai > L Furthermore, when h and g are linear independent, there exists a unit vector 
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Co SO that 

c^g = and c^h > 0. (91) 

Substituting (refeq:lg2) into ( |90l ). we obtain Ai > 1. By using the same approach, we can show that 
A2 > 1, and, in particular, A2 > 1 when h and g are linear independent. ■ 

Appendix II 
Proof of Corollary □ 

Proof: Theorem [U demonstrates that for a given a e [0, 1], the maximum achievable secrecy rate of 
user 1 is 7i(«). This implies that 

-Ri.max = max 7i(a). (92) 

0<a<l 

We also notice that Ai = 71 (1). Hence, it is sufficient to show that 71(a) is a nondecreasing function on 
an interval [0, 1]. 
Let 

^(") = —J • (93) 

da 

Based on the definition of 71(a) in ([8]), we can write 

P|h^eiP(l + aPlg^eiP) - (1 + aPlh^eiRplg^eiP 



K(a) 



(l + aP|g^^ei|2)2 
P(|h^ei|2 - Ig^eiH 



(l + aP|g^ei|2)2 
Now, the definitions of Ai and ei in ^ imply that 



(94) 



|hVr-Ai|g%r = ^. (95) 



Moreover, Since Ai > 1 (see Lemma [U), we obtain 



> 0, 



(96) 
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and hence, 71(a) is a nondecreasing function on an interval [0, 1]. Therefore, we have 



^i,max = max 7i(a) = Ai. 

0<a<l 



Appendix III 
Section [IV] Derivations 

(Double-Binning Scheme): By contrast with the classical DPC scheme, the secret DPC scheme is 
based on the double-binning code structure as follows. Let 

= /(Vi;F2|V2), i?* = /(V2;Fi|Vi) and i?^ = /(Vi; V2). (97) 

Generate 2"(^*+«^+«*) codewords ^^liwk,jk, k), u^^ = 1, 2, . . . , = 1, 2, . . . , 2«s = 1, 2, . . . , 2^*, 

independently at random according to p(vfc). Based on the labeling, we partition the codebook {v^(wfc, jfc, Ik)} 
into 2"^^* bins, where bin Wk represents the message index Wk- We further divide bin Wk into 2"^^ sub-bins. 
Each sub-bin {wk,jk) contains 2"^* codewords. 

To send the message pair (wi, W2), the transmitter employs a joint stochastic encoder. We first randomly 
select a sub-bin (wi,ji) from the bin wi and randomly choose a codeword v"(wi,ji,/i) from the sub- 
bin (wi,ji). Next, we randomly select a sub-bin (w2, 72) from the bin W2 and find a codeword V2 (w2, j2, ^2) 
in the sub-bin (1^2, J2) so that the sequences \-^{wi,ji,li) and V2 (1/^2, J2, ^2) are jointly typical with 
respective to p{'Vi, V2). Since each sub-bin contains 2"^^^^'^'^'^ codewords, the encoding is successful with 
probability close to 1 as long as n is large. Finally, we generate the channel input sequence x"(u7i,u72) 
according to the mapping p(x|vi, V2). 

Proof: (Lemma |3l) We first check the power constraint. Since Ui and U2 are independent and 

X = Ui + U2, 

the covariance matrices Ku^ and Ku^ satisfy 



tr(i^u, + Kv,) = tr(irx) < P- (98) 
Following from [29, Theorem 1] and using the setting in (|30l) . we can immediately obtain the well- 



known successive dirty-paper encoding result: 



/(Vi; Fi) - /(Vi; V2) = /(Ui; h^Ui + Z^) 

= log2(l + h^/Cu,h). 

Since V2 = U2 is independent of Ui and Vi = Ui + bh^U2, we obtain 

/(Vi; F2IV2) = /(Ui + bh^U2; F2IU2) 
= /(Ui;F2|U2) 
= log2(l + g^Auig). 

Combining dill), (EH) and (flOOl) . we have 



Ri < /(Vi; Fi) - /(Vi; V2) - /(Vi; F2I V2) 

log2 



1 + h^i^u.h 

Moreover, we can compute 

/(V2;r2)=/i(>^2)-/^(>^2|V2) 

= /i(g^(Ui + U2) + Z2) - /i(g^Ui + Z2) 

_ l + g^(i^^u,+i^^ujg 

~ S2 ^ ; tTTT • 
1 + g^ifuig 

and 

/(V2; FilVi) + /(Vi; V2) = /(Vi, V2; Fi) - [J(Vi; Fi) - /(Vi; V2 

Substituting (fT02l) and (11031) into dH]), we obtain that 

R2 < /(V2; Y2) - /(Vi; V2) - /(V2; FilVi) 

= log2 ^ Wl? ^Og2 



1 + g^J^Uig ' l + h^^ATuih 

1 + gf^Ku^+KuJg l + h^ATu.h 
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Applying Lemma [2] with bounds (IIOII) and (11041) , we have the desired result. 

Proof: (Equation (l40b ) For convenience,we define 

[1 + g^(i^u, + Aujg][l + h^Au.h] 



[I + h^(J^u, + ^ujh][l + g^J^u.g] 

^ l + h^/luih_ 



1 + 



l + g^iTu.gJ 



Since c^^(a)c2( 



1, we substitute (l35l) into c/(K'ui, -f^U2) ^nd obtain 



1 -a)Pg^C2(a)c^(a)g 
1 + aP|g^eip 



1 + 



1 -a)Ph^C2(a)c^(a)h 



l + aP|h^ei|2 



-1 



cf (a)c2(a) + 



C2(a) 



1 + aPlg-f^GiP 



cf (a)c2(a) 



1 - a)Pcf (a)hh^C2(Q) 
l + aP|h^ei|2 





H 


(1 - «)Pgg^ " 


C2(«) 


1 + aP g^ei 2 


cf(«) 


H 


(1 - a)Phh^ " 


C2(a) 


1 + aP|h^ei|2_ 



(105) 



(106) 



Note that 72(a) and C2(a) are the largest generalized eigenvalue and the corresponding normalized 
eigenvector of the pencil i.e., 



;i-a)P 



1 + aPlg-^eiP 



gg^ ) C2{a) 



72 (a j 



;i-a)P 



hh^ ) C2(a). 



1 + aP|h^ei|2 



Hence, we have 



(i2(i^Ui, A'ua) = 72(a) 



(107) 



Appendix IV 
Section |V]Derivations 

Proof: (Lemma H]) It is sufficient to show that the error probability pjT^ and the equivocations 
H{W2\Y^) and H{W2\Y^') are the same for the channels y2|x ^ ^ when we use the same codebook 
and encoding schemes. We note that 



p{n) 



(n) 



,2 • 



(108) 
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Hence, Pi""* is small if and only if both Pj"^ and Pj:'^ are small. However, for given codebook and 
encoding scheme p(x"|u;i, w;2), the decoding error probability P^'^'* and the equivocation rate at user k 
depend only on the marginal channel probability density ]?>>,|x- Therefore, the same code and encoding 
scheme for any -palx ^ ^ gives the same Pi"^ and equivocation rates. This concludes the proof. ■ 

Proof: (Theorem |2l) Here we prove Theorem [2] and derive the outer bound for Ri . The outer bound 
for R2 follows by symmetry. 

The secrecy requirement ([7]) implies that 

nRi = H{Wi) < H{Wi\Y^) + ne. (109) 

On the other hand, Fano's inequality and Pe < e imply that 

HiWilYI") < elog(Mi - 1) + h{e) = n6i. (110) 

where h(x) is the binary entropy function. Based on (11091 ) and ( II 101 ). we have 

nPi < H{Wi\Y^) + ne 

< H{Wi\Y^) - HiWilY^') + n{Si + e) 

< HiWilY^^) - + e) (111) 
= I{Wi;Y,^\Y2^)+n{6i + e) (112) 

where (II 1 II) follows from conditioning reducing entropy. Since Wi X" (F", Y2) forms a Markov 
chain, we can further bound (I112|) as follows 

nRi < /(X"; Yl'\Y^) + n{6i + e) 

n 

< lO^u YiAY2,^) + n{5i + e). (113) 

Finally, by applying Lemma IH we can replace Yi and Y2 by Yi and Y2, respectively. Hence, we have 
the Sato-type outer bound on Pi. ■ 

Proof: (Lemma H]) Here, we proof Lemma [5] based on the Sato-type outer bound in Theorem [2l 
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For the Gaussian BC defined in (|45l) . the upper bound (|42l) on Ri can be rewritten as follows: 
J(X; Fi, Y2) - /(X; ^2) = ^2) - /^(Vl, Y^alX) - hiY^) + /i(r2|X) 

= /i(ri|r2)-[/i(^i,^2)-M^2)] 

= h{Y^\Y2)-log,{2ne){l-\p\'). (114) 
The first term of (|1 14|) can be further bounded as follows 

/i(yi|f2) = M>'l-i^^2|V'2) 

< hiYi - UY2) for any z/ e C (115) 

where the inequality follows from removing conditioning. Moreover, the maximum-entropy theorem [22] 
implies that 

h{Yi - VY2) < log2(27re)|Var[yi - VY2] \ 

= log2(27re)|Var[(h - z/g)^X] + Var[Zi - UZ2] \ 

= log2(27re) [(h - ugfKj^ih - ug) + 1 + - u* p - pV] . (116) 
Combining (II 141) . (II 151 ) and (II 16L we obtain the following upper bound: 



(h - z/g)^Ax(h - z/g) 


+ 


1 + 


\v\ 


P — u*p — p*u 


(1- 


IpI') 



/(X;Fi,F2)-/(X;F2) <minlog2^ ^ , °\ ' ' (117) 



= /i(p,i^x). (118) 

Next we prove that for given p and A'x, the expression /(X;Yi,F2) — -^(X; I2) is maximized by 
Gaussian input distributions. When X is a Gaussian random vector with zero-mean and covariance matrix 
i^Xj the channel (|45l) implies that Yi and Y2 are zero-mean Gaussian random variables. Choosing 

Note that 

E[(Fi - uS2)Y*] = Cov[yi, Y2] - ^/oVar[F2] = 0, (120) 
the Gaussian random variables Yi — i^o^2 and Y2 are uncorrelated, and hence they are statistically inde- 



29 



pendent. This implies that 



(h - z/og)^i^x(h - Z/og) 


+ 1 + 






(1- 


IpI 





h{Yi\Y2) = h{Y,-uS2) 

= log2(27re) [(h - z/og)^Kx(h - u^g) + 1 + W^]' - z/> - p*u,] . (121) 

Inserting (11211) into (II 14|) we have 

/(X;y'i,F2)-/(X;F2) =log2 

>/i(p,i^x). (122) 

Bounds (|118l) and (|122l) imply that Gaussian input distributions are optimal for the expression /(X; Yi, Y2) — 
/(X;F2). 

Following the same approach, we can prove that for given p and Kx, Gaussian input distributions 
maximize the expression /(X; Yi, Y2) — -^(X; Yi), the upper bound (l43l) on R2. This lets us restrict attention 
to zero-mean Gaussian X with covariance matrix Kx- Now, bounds (l42l) and ( |43l) become 

Ri<fi{p,Kx) (123) 
and R2<f2{p,Kx) (124) 

This yields the rate region TZq^{p, Kx)- Hence we have the desired result. ■ 

Proof: (Lemma H]) For a given Kx, we first evaluate L{Kx, 0) and L{Kx, 1). Since 7i(0) = 1 and 
the input covariance matrix Kx is positive semidefinite, we obtain 

L{Kx, 0) = (h - Pog)''i^x(h - pog) > 0. (125) 
On the other hand, since 71 (1) = Ai and Kx is Hermitian and positive semidefinite, we have 

L{Kx, 1) = (h - PoAig)^(Kx - Peief) (h - poAig) 

< tr(Ax)|h - poAigp - P|(h - PoAig)^ei|2 

< P|h - poAigp - P|(h - poAig)%p. (126) 
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Based on the definition of po in (l5T| ). we can compute 



h - PoAig = h - A 



h^ei 



^ (hh^ - Aigg^)ei 

^ (Ai - l)ei 
Ph^ei 

where the last step follows from the definitions Ai and ei in Moreover, since e^ei 
be rewritten as 



(127) 
1, (fml) can 



L(K^, 1) < P 
= 



(Ai - l)ei 



Ph^ei 



P 



Ai-1 H 



(128) 



We note that L(A'x,«) is a continuous function on the interval a E [0,1] for a give Kx- Since 
^(^x, 0) > and L{Kx, 1) < 0, there exists a e [0, 1] such that L{Kx, a) = 0. ■ 

Proof: (Lemma We note that Ai and ei are the largest generalized eigenvalue and the corre- 
sponding normalized eigenvector of the pencil [/ + Phh^, / + Pgg^]. Based on the Rayleigh's quotient 
principle in Theorem [3l we obtain 

c^(/ + Phh^)c ef(/ + Phh^)ei 



max 



c c^(/ + Pgg^)c ef(/ + Pgg^)ei 



Ai. 



(129) 



Hence, we have 



mm 



(1 + aP 


g^ei 


2) + c^[(l-a)Pgg^]c 


(1 + aP|h^ei 


2) + c^[(l -a)Phh^]c 



-.Hi 



(130) 



By using the definition of 71(a) in dS]), we have 

fl-a)P 



mm 



l + aP|g^ei|2' 



c e 



H 



;i-a)P 



1 + aP|g^ei|2' 



ei 



■.H 



l-a)P 



1 + aP|h^ei|2 



hh 



H 



c e 



H 



l-a]P 



1 + aP|h^ei|2 



hh 



H 



ei 



7i(«) 
Ai ■ 



(131) 



Now, the Rayleigh's quotient principle implies that 7i(a)/Ai and ei(a) are the smallest generalized 
eigenvalue and the corresponding normalized eigenvector of the pencil ■ 
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Based on the definition of 71(a) in ([8]), we obtain 

1 + aP|h^ei|2 



Ai - 71(a) = Ai 



1 + aP|g^ei|2 



(Ai - 1) + aP(Ai 


g^eil 


2 _ 


h-^ei 




1 + aP|g^ei 


2 



(Ai-1)- 



1 — a 



1 + aP|g^ei|2 

where the last step follows from (l52l) . Substituting ( 11391) into (11401) . we have 



(140) 



h-po7i(")f 



Ai-1 
Ph^ei 



(1 - a)P . 



1 + aP|g^ei|2' 



ei. 



(141) 



Now dMl) and (|141|) imply that 

[h - po7i(«)g]^C2(a) = 0. 
Combining with (11371) . we have the desired result. 



(142) 



Proof: (Equation ((77\ ) First, we consider ({a) defined in (|75|) . Based on (11331) and (11361) . C(a) can 
be rewritten as 



C(«) 



[g - p*72(a)h]^[g - p*72(a)h] 

(l + aP|h^ei|2)[7 2(a) - 1] / c^(a)[7i(a)gg^ - 72(«)hh^]c2(a) 
(l-a)P 
1 + aP|h^ei|2 



(l-a)P 



[72(a) - 1] 



,7i("; 



|7i(a)g^C2(a)|2 
-72(a)|PoP 



(143) 



Now, we consider 



(1 - a)PC(a) = [72(a) - 1][1 + aP|g^ei|2 - 72(«)|Po|' - aP|h^ei|S(«) IPoP] 

= [72(a) - 1]{1 - 72(«)|Po|' + aP|g%ni - 72(a)]} (144) 



where the last step of (11441) follows from po = (g^ei)/(h^ei). 
Next, we consider 77(a) defined in (1761) . Note that (l66l) implies that 



|efc2(a)r 



(1 -a)P 
_l + aP|g^ei|2 



g%ng^C2(a)|^ 



(145) 
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Combining (11321) . (1 1431) and (11451) . we obtain 



r/(a) = C(a)|efc2(a)r 

^ (l + aP|h^eip)(72(a)-l 



[l-a)P 

= [72(«)-l]|gVr 
= [72(«)-l]%^eip 



1 _ 72(«) 

7i(a) (a) 
l-a)P|g^C2(a^'2 



h^C2 



C2 



|efc2(a)r 



(l-a)P|h^C2(a) 



l + aP|g^ei|2 "^2laj i + ^pi^^e^p 



(146) 



where the last step of (11461) follows from the definition of 72(a) in (l36l) . Combining (I144|) and (11461) . we 
obtain the desired result. ■ 
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